Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A77E722609111F094C9F6D1DAE4EC9C.roa
File: 9A77E722609111F094C9F6D1DAE4EC9C.roa (raw, json)
Hash identifier: dZiHM/5zqADkLeM49QoBI93zvRZAxDVlu0dqigjLbtY=
Subject key identifier: F9:4F:BF:53:A8:D2:EC:9C:AB:B8:DF:6D:1C:C5:07:B1:81:C4:13:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A77E722609111F094C9F6D1DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 09:04:53 +0000
ROA not before: Mon 14 Jul 2025 09:04:48 +0000
ROA not after: Sat 09 Aug 2025 09:04:48 +0000
asID: 57043
IP address blocks: 154.84.166.0/24 maxlen: 24
154.84.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101799 (0x18da7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 09:04:48 2025 GMT
Not After : Aug 9 09:04:48 2025 GMT
Subject: CN=6874c835-2a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:e2:97:64:68:2d:35:e8:08:88:5f:79:2e:
93:f3:42:d1:70:54:f0:fb:23:29:b6:51:48:0a:a5:
69:fb:fa:85:e9:ac:a3:14:f7:dc:57:93:95:5b:c1:
07:e5:24:d2:a4:b3:d1:3f:0d:95:29:13:1d:6b:85:
d5:96:7f:9b:ae:d9:a4:bb:3a:37:ab:66:c8:9a:70:
31:75:80:36:59:76:35:bd:92:00:e6:d8:c0:fa:98:
68:28:bf:79:d0:43:5e:c4:c7:73:f5:04:25:8f:5c:
a1:ad:04:92:1a:ed:90:c5:78:40:6c:ce:93:91:e6:
23:56:f9:03:95:8b:57:fe:ef:13:04:11:9d:5f:32:
dd:6c:69:f9:dd:a4:60:e6:a0:28:88:f7:b9:db:3f:
d5:58:0f:00:94:c3:60:18:23:7a:d4:6a:a6:0e:24:
0a:a9:b2:4b:63:71:6d:d1:ca:42:98:31:47:7e:c4:
79:9c:11:cf:8d:f2:a0:fc:af:11:54:89:67:4f:24:
b1:36:32:cf:5b:0c:11:55:76:5d:33:0d:92:90:35:
84:4b:b2:b8:ad:0a:7e:47:d2:4d:fc:af:83:a0:e6:
15:9c:36:c0:5e:a0:27:02:63:d2:4e:f9:dd:c2:d6:
05:84:93:c7:66:1f:eb:d1:e9:b8:80:44:58:be:3f:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4F:BF:53:A8:D2:EC:9C:AB:B8:DF:6D:1C:C5:07:B1:81:C4:13:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A77E722609111F094C9F6D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.166.0/24
154.84.173.0/24
Signature Algorithm: sha256WithRSAEncryption
45:52:02:77:b2:1f:42:d1:c9:e7:09:d3:ee:d2:23:50:d2:f2:
a3:6b:7f:22:c2:59:33:3e:df:72:d5:36:6d:b3:f4:ac:49:b2:
6c:5f:75:e1:27:aa:3a:9b:b2:e0:e5:91:a6:05:bf:0a:ef:c4:
58:a0:96:22:0f:ee:7d:bd:0f:a5:50:73:02:33:53:8d:95:e6:
24:b3:4f:63:1e:54:89:b0:9b:2f:b2:76:b5:02:26:89:35:9a:
d5:47:a8:bd:8e:8d:20:bb:93:f8:bd:b4:97:9c:1c:83:11:2c:
6a:e4:64:33:21:94:ee:9e:45:44:64:29:16:2d:df:91:b1:b3:
f7:f6:9d:9b:92:f6:e6:95:f1:55:50:99:aa:c5:7b:f0:e6:11:
f0:d1:7c:19:d1:a3:5c:ae:bd:ee:ee:91:c3:b5:d4:17:0d:76:
b1:8d:4f:d9:3a:ec:6b:3d:32:e4:4e:d7:ee:31:30:9c:d3:26:
62:16:94:25:a5:00:01:eb:5b:12:05:bc:3a:4f:86:3d:75:25:
4e:81:00:99:8f:09:88:21:90:f3:16:bc:9a:0f:fb:75:b9:31:
36:5a:6d:22:af:60:53:36:f5:e9:86:9e:4a:3f:55:61:b2:9f:
c9:0e:fc:ac:7c:d6:26:82:80:be:66:4d:8c:07:fb:22:a9:d7:
ae:21:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:46 2025 by rpki-client